This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/shhgHBlMkNZMIVWDyQQj7NBTdw0.roa File: shhgHBlMkNZMIVWDyQQj7NBTdw0.roa (raw, json) Hash identifier: jrDSj8qm2Kgz9iT9gk8ZW/qhUqReOnYP5Eg/lw2ghO0= Subject key identifier: B2:18:60:1C:19:4C:90:D6:4C:21:55:83:C9:04:23:EC:D0:53:77:0D Certificate issuer: /CN=a76dd9dad75877f7d28d14e08dc55b1330bd13b7 Certificate serial: 019B320160A0FB2FD68DA8AD4F1ED7A30426 Authority key identifier: A7:6D:D9:DA:D7:58:77:F7:D2:8D:14:E0:8D:C5:5B:13:30:BD:13:B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/shhgHBlMkNZMIVWDyQQj7NBTdw0.roa Signing time: Thu 18 Dec 2025 15:08:29 +0000 ROA not before: Thu 18 Dec 2025 15:08:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 210099 IP address blocks: 46.31.78.0/24 maxlen: 24 85.117.236.0/24 maxlen: 24 85.117.237.0/24 maxlen: 24 85.117.238.0/24 maxlen: 24 185.17.112.0/24 maxlen: 24 185.17.113.0/24 maxlen: 24 185.17.114.0/24 maxlen: 24 185.17.115.0/24 maxlen: 24 185.73.200.0/24 maxlen: 24 185.73.201.0/24 maxlen: 24 185.73.202.0/24 maxlen: 24 185.73.203.0/24 maxlen: 24 185.165.77.0/24 maxlen: 24 185.165.78.0/24 maxlen: 24 2a04:7c1::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.crl rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.mft rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 22:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:01:60:a0:fb:2f:d6:8d:a8:ad:4f:1e:d7:a3:04:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a76dd9dad75877f7d28d14e08dc55b1330bd13b7 Validity Not Before: Dec 18 15:08:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b218601c194c90d64c215583c90423ecd053770d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:1e:1e:bc:37:65:de:8c:07:ea:16:41:0f:29: 1c:98:10:36:43:38:f4:87:11:61:79:be:da:e8:3c: 9e:e5:65:39:b7:81:c0:91:3b:4c:2a:8d:41:91:16: 9f:bd:b1:15:92:86:20:65:8c:46:04:76:cf:c2:51: 38:d2:e5:3b:2c:1e:7a:c0:81:3d:74:3e:e4:08:c3: 7b:b7:f9:d4:c8:cd:fb:1d:52:81:43:2b:5e:a9:d4: e0:dd:61:10:51:58:c8:c0:0c:c9:35:a5:d9:a5:db: e5:78:4a:0f:e0:ec:4c:a8:e3:79:73:35:13:a8:1e: 80:8d:24:2d:4c:28:fd:cf:c1:41:b7:47:1b:34:9e: 03:b0:fb:9c:c3:68:db:9a:ff:43:e7:d1:e6:29:a4: f7:9b:e7:70:83:28:ba:ed:08:68:ad:45:0e:21:e7: 4a:91:20:06:35:05:5c:92:4c:72:d3:a4:f0:ad:4c: b6:8f:cb:6f:f1:26:c8:87:01:10:cb:df:2f:05:e4: 65:58:aa:84:27:a7:7c:9e:7e:30:15:7b:e7:f8:fc: d0:ed:a9:02:ae:81:c3:e7:11:84:bb:82:ae:9d:dc: df:2c:e5:1d:6f:b7:f6:8e:90:c5:62:07:87:72:58: 4f:eb:54:36:89:9a:f3:34:a5:e4:73:ee:02:bb:ee: 48:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:18:60:1C:19:4C:90:D6:4C:21:55:83:C9:04:23:EC:D0:53:77:0D X509v3 Authority Key Identifier: keyid:A7:6D:D9:DA:D7:58:77:F7:D2:8D:14:E0:8D:C5:5B:13:30:BD:13:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/shhgHBlMkNZMIVWDyQQj7NBTdw0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.31.78.0/24 85.117.236.0-85.117.238.255 185.17.112.0/22 185.73.200.0/22 185.165.77.0-185.165.78.255 IPv6: 2a04:7c1::/32 Signature Algorithm: sha256WithRSAEncryption ab:bf:e3:a0:92:a1:7b:da:3e:eb:f9:e8:59:df:d9:11:bc:3f: ee:f6:3d:2d:3c:fe:46:cc:74:ba:97:73:b4:b4:08:b7:c0:85: fc:21:d4:1e:8e:32:8c:17:e2:9d:8e:a5:fa:d1:7f:4b:7b:64: 0c:4e:cf:a8:df:b2:ca:f1:68:9e:66:cc:92:68:12:32:ba:f9: 81:59:cc:c8:97:9b:c4:46:ed:15:e3:65:c2:e3:df:00:d9:8d: 4f:0e:6e:04:5d:b7:e9:a2:54:6e:72:30:49:9a:c0:c4:4b:f2: b6:54:de:fe:52:d2:8e:3f:58:57:93:41:e4:66:34:0d:9b:e9: 3d:aa:ad:41:14:23:34:e8:9a:50:b4:db:c6:52:9f:c8:ae:7b: cb:d3:dc:12:bb:09:b9:29:f6:30:e9:d8:4b:b1:6a:d6:ce:8d: 21:1c:7c:da:49:a5:eb:7f:cd:c5:1e:47:a5:e5:6e:96:af:06: 9f:9b:28:67:69:d1:2c:11:c5:a1:25:af:4c:8c:6a:d2:cd:f0: 9f:84:5f:2c:28:73:a3:2e:da:ae:5f:e3:24:b5:83:83:9f:62: 3a:36:3b:da:04:45:63:aa:f8:fc:78:53:96:81:91:08:8c:53: 86:6e:b3:d2:bd:54:b0:7a:0c:1c:5b:df:97:5b:62:79:a1:36: 5e:a4:e2:2c -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgISAZsyAWCg+y/WjaitTx7XowQmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3NmRkOWRhZDc1ODc3ZjdkMjhkMTRlMDhkYzU1YjEzMzBi ZDEzYjcwHhcNMjUxMjE4MTUwODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMjE4NjAxYzE5NGM5MGQ2NGMyMTU1ODNjOTA0MjNlY2QwNTM3NzBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8h4evDdl3owH6hZBDykcmBA2Qzj0 hxFheb7a6Dye5WU5t4HAkTtMKo1BkRafvbEVkoYgZYxGBHbPwlE40uU7LB56wIE9 dD7kCMN7t/nUyM37HVKBQyteqdTg3WEQUVjIwAzJNaXZpdvleEoP4OxMqON5czUT qB6AjSQtTCj9z8FBt0cbNJ4DsPucw2jbmv9D59HmKaT3m+dwgyi67QhorUUOIedK kSAGNQVckkxy06TwrUy2j8tv8SbIhwEQy98vBeRlWKqEJ6d8nn4wFXvn+PzQ7akC roHD5xGEu4KundzfLOUdb7f2jpDFYgeHclhP61Q2iZrzNKXkc+4Cu+5IlQIDAQAB o4ICQDCCAjwwHQYDVR0OBBYEFLIYYBwZTJDWTCFVg8kEI+zQU3cNMB8GA1UdIwQY MBaAFKdt2drXWHf30o0U4I3FWxMwvRO3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDIzWjJ0ZFlkX2ZTalJUZ2pjVmJFekM5RTdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9kMDA4ODktZTVjYS00MDkwLWE2YTQt MmFjNmZmNzViZWIwLzEvc2hoZ0hCbE1rTlpNSVZXRHlRUWo3TkJUZHcwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS9kMDA4ODktZTVjYS00MDkwLWE2YTQtMmFjNmZmNzViZWIw LzEvcDIzWjJ0ZFlkX2ZTalJUZ2pjVmJFekM5RTdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFYGCCsGAQUFBwEHAQH/BEcwRTA0BAIAATAuAwQALh9OMAwD BAJVdewDBABVde4DBAK5EXADBAK5ScgwDAMEALmlTQMEALmlTjANBAIAAjAHAwUA KgQHwTANBgkqhkiG9w0BAQsFAAOCAQEAq7/joJKhe9o+6/noWd/ZEbw/7vY9LTz+ Rsx0updztLQIt8CF/CHUHo4yjBfinY6l+tF/S3tkDE7PqN+yyvFonmbMkmgSMrr5 gVnMyJebxEbtFeNlwuPfANmNTw5uBF236aJUbnIwSZrAxEvytlTe/lLSjj9YV5NB 5GY0DZvpPaqtQRQjNOiaULTbxlKfyK57y9PcErsJuSn2MOnYS7Fq1s6NIRx82kml 63/NxR5HpeVulq8Gn5soZ2nRLBHFoSWvTIxq0s3wn4RfLChzoy7arl/jJLWDg59i OjY72gRFY6r4/HhTloGRCIxThm6z0r1UsHoMHFvfl1tieaE2XqTiLA== -----END CERTIFICATE-----Generated at Sun Dec 21 07:38:25 2025 by rpki-client